Ongoing social engineering attacks via GitHub / NPM | Dark Hacker News